$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ceaea99f-2361-3e42-81dc-2424d99387d5.roa File: ceaea99f-2361-3e42-81dc-2424d99387d5.roa (raw, json) Hash identifier: VgW6pZkkcyhascug0bWGGW+ADl7PipvyGpL6UKrVtdg= Subject key identifier: EF:88:EE:7A:7A:92:19:0D:37:02:7E:1C:C1:7E:94:58:3B:99:9C:F8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D44FA4E7AFFB3C65063EAEC1A Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ceaea99f-2361-3e42-81dc-2424d99387d5.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.33.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:4e:7a:ff:b3:c6:50:63:ea:ec:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=b7a12a06-a85c-40df-ac6d-15d9b34fcc92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:41:7d:39:8d:76:fc:ab:4e:18:a2:96:ea:c9: 49:30:40:67:c8:77:18:ff:c9:23:df:51:73:6e:ac: 5d:95:36:19:60:d4:70:40:dc:b2:02:c9:22:1d:fb: 4d:53:d3:82:34:38:9f:d0:f4:7b:ee:cd:c9:85:6c: c5:bf:3e:c8:7a:53:e8:e8:04:85:79:c8:66:ec:dd: dc:c5:72:b0:f5:57:48:6f:5c:74:24:03:d1:41:2a: 69:8e:98:2f:6d:86:1b:35:86:02:e1:ac:9d:90:65: bd:12:7a:cc:06:c7:fc:9e:2c:33:e9:7b:5c:dd:52: 7c:d9:db:44:45:5c:b2:86:52:fa:93:0b:3b:a6:5c: 9f:3b:31:9a:17:1b:00:ef:d0:92:25:04:10:fb:d9: 0c:0c:25:59:c8:28:d0:47:0c:78:23:ae:33:9d:92: e3:3c:ea:29:d6:80:76:6e:0b:30:a7:f5:ef:17:23: 9d:47:f1:99:14:b5:bd:04:3d:01:11:62:70:b6:a4: c2:95:74:fd:ba:a1:da:5c:43:e9:40:e4:73:37:44: 57:2e:10:b6:98:7d:bd:8d:50:0c:0d:24:6b:37:1b: 4f:c6:40:dd:52:07:f2:92:00:85:b1:f8:52:a0:14: 9f:76:06:ba:2d:be:50:62:6a:83:0f:b5:26:2f:6a: 1b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:88:EE:7A:7A:92:19:0D:37:02:7E:1C:C1:7E:94:58:3B:99:9C:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ceaea99f-2361-3e42-81dc-2424d99387d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:82:5d:a2:5c:e2:61:9a:1d:d8:ca:b0:0a:34:ea:2d:18:34: 51:fb:11:ac:38:57:e6:df:6c:58:e3:b0:36:df:41:a9:7a:48: d5:ef:3b:61:0a:18:9d:d9:24:f3:95:0d:2b:7c:bf:2b:62:61: 38:be:b6:59:e2:21:e3:81:d0:62:b3:37:7e:e2:32:52:9c:27: ef:9c:9a:26:c0:81:8f:78:6a:35:81:45:43:42:fb:78:e5:a5: f5:07:8b:4e:a1:1f:d5:b6:e6:20:a1:f1:04:c0:56:e4:f5:7b: 6f:80:3e:93:24:b8:df:10:43:79:f9:95:19:40:a4:6f:15:fd: 6c:da:52:f0:40:b3:fc:f2:5a:8f:84:e4:39:ea:3e:7b:8b:b4: 53:80:97:91:65:d2:2d:29:9c:d2:51:77:2e:5c:81:50:22:c3: 6f:2d:df:04:29:20:25:d6:71:e6:97:55:2b:87:f4:d4:92:0c: 54:07:00:4f:d4:01:0f:23:46:c3:38:7c:b3:f8:af:9f:7e:8d: 7b:a5:8e:8d:6f:44:21:e4:ad:54:1f:23:b6:80:b2:16:2b:2f: d3:26:0e:cf:9e:ef:ba:fc:4b:f3:52:11:1c:71:1f:4c:cb:03: b4:26:b0:1b:71:c5:89:7d:e6:94:37:76:6e:ef:1a:2c:f2:fd: 1c:74:22:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+k56/7PGUGPq7BowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YjdhMTJhMDYtYTg1Yy00MGRmLWFjNmQtMTVkOWIzNGZjYzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEF9OY12/KtOGKKW6slJMEBnyHcY/8kj31Fz bqxdlTYZYNRwQNyyAskiHftNU9OCNDif0PR77s3JhWzFvz7IelPo6ASFechm7N3c xXKw9VdIb1x0JAPRQSppjpgvbYYbNYYC4aydkGW9EnrMBsf8niwz6Xtc3VJ82dtE RVyyhlL6kws7plyfOzGaFxsA79CSJQQQ+9kMDCVZyCjQRwx4I64znZLjPOop1oB2 bgswp/XvFyOdR/GZFLW9BD0BEWJwtqTClXT9uqHaXEPpQORzN0RXLhC2mH29jVAM DSRrNxtPxkDdUgfykgCFsfhSoBSfdga6Lb5QYmqDD7UmL2ob6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+I7np6khkNNwJ+HMF+lFg7mZz4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2VhZWE5OWYtMjM2MS0z ZTQyLTgxZGMtMjQyNGQ5OTM4N2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmCXaJc4mGaHdjKsAo06i0YNFH7Eaw4V+bfbFjjsDbfQal6SNXvO2EK GJ3ZJPOVDSt8vytiYTi+tlniIeOB0GKzN37iMlKcJ++cmibAgY94ajWBRUNC+3jl pfUHi06hH9W25iCh8QTAVuT1e2+APpMkuN8QQ3n5lRlApG8V/WzaUvBAs/zyWo+E 5DnqPnuLtFOAl5Fl0i0pnNJRdy5cgVAiw28t3wQpICXWceaXVSuH9NSSDFQHAE/U AQ8jRsM4fLP4r59+jXuljo1vRCHkrVQfI7aAshYrL9MmDs+e77r8S/NSERxxH0zL A7QmsBtxxYl95pQ3dm7vGizy/Rx0Igc= -----END CERTIFICATE-----Generated at Fri Mar 27 03:44:56 2026 by rpki-client